CRITICAL: Cursor does NOT follow .gitignore and .cursorignore files!

Bug Report
5

I believe .gitignore-ed files (like .cursorignore-d` files) can “still be included in AI requests, such as if you recently viewed a file and then ask a question in the chat.” And whether your tabs are open may not be the logic that determines “recently viewed a file”.

  • While a ‘.cursorignore’ file can prevent files from being indexed, those files may still be included in AI requests, such as if you recently viewed a file and then ask a question in the chat. […]

— https://www.cursor.com/security#codebase-indexing

I raise related security concerns in Security Concerns with .gitignore, .cursorignore, .cursorban .

1 Like